The host must explicitly authorize this project execution. Model invocation cannot grant permission. Host owns the ten-round budget, actual execution evidence, source changes and publication gate. Return the actual qualification status, unresolved errors and evidence unchanged. Never claim exhaustive correctness.